Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/z1nC-kZ4cGRUU31GgA3H011Geys.roa
File: z1nC-kZ4cGRUU31GgA3H011Geys.roa (raw, json)
Hash identifier: pwS+nF6IKJ3O3DkjXPY+7QsfQ6bVD6HlEl7BOnt6tHM=
Subject key identifier: CF:59:C2:FA:46:78:70:64:54:53:7D:46:80:0D:C7:D3:5D:46:7B:2B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01863FFC5C93FB02AFA08F65D5F23A3D5926
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/z1nC-kZ4cGRUU31GgA3H011Geys.roa
Signing time: Sat 11 Feb 2023 10:19:08 +0000
ROA not before: Sat 11 Feb 2023 10:19:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204035
IP address blocks: 193.42.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 02 Aug 2023 09:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:fc:5c:93:fb:02:af:a0:8f:65:d5:f2:3a:3d:59:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 11 10:19:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf59c2fa4678706454537d46800dc7d35d467b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:a9:38:b2:4a:d5:1f:27:18:13:2d:b4:ee:
a6:f0:32:b2:81:e1:86:70:f7:3a:42:91:f6:8e:9f:
30:5b:29:4c:35:3b:06:cd:1c:be:ca:1a:fe:bf:a1:
8e:18:12:10:22:d7:78:52:0f:ea:de:bd:6d:1b:6f:
19:ce:25:c3:4e:78:d7:a2:b5:41:7e:b2:13:33:bb:
3d:a2:98:a1:0b:af:b6:83:e9:03:45:67:d0:0f:e2:
23:91:21:11:3f:85:4a:07:cf:0e:da:88:59:5d:f8:
7f:0a:df:b3:40:a7:e0:e2:7d:33:ad:62:6f:f4:da:
6b:f3:e9:5e:95:a3:8a:b7:91:df:32:9a:86:07:b2:
5c:11:6a:ce:7b:e8:19:2e:76:b9:bc:5a:3c:f5:db:
84:ff:dc:91:0d:16:dd:4b:12:65:92:23:ec:9c:69:
0e:23:2c:e8:a9:ba:8c:ba:e7:e3:94:b2:5c:98:d7:
0f:03:8a:2b:2f:99:f9:7e:96:48:ab:b4:54:6b:33:
1d:4c:6c:90:80:60:26:d9:ae:60:1f:73:94:98:3c:
a7:79:23:1a:c1:32:d8:e2:6e:d7:a6:5c:8f:9f:5f:
2f:c9:ce:62:32:e4:89:e8:5f:8d:50:bd:0a:01:58:
7f:ab:34:22:ed:23:26:e1:23:0b:c9:be:8b:ed:b1:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:59:C2:FA:46:78:70:64:54:53:7D:46:80:0D:C7:D3:5D:46:7B:2B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/z1nC-kZ4cGRUU31GgA3H011Geys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:f5:f7:e7:d9:14:ae:22:04:0b:75:01:f5:6c:d2:80:8c:54:
8e:c1:94:93:25:e4:d7:13:62:09:75:05:f2:0e:70:aa:04:63:
cd:d9:b8:f0:82:0f:7d:00:04:2c:2f:74:f6:95:ea:44:33:b1:
68:1d:2a:49:0f:4f:cf:a4:e3:80:7f:52:6c:4c:e2:4a:c1:d2:
72:06:96:3c:dd:70:79:25:6f:1f:ed:d9:c0:c5:ba:95:e5:2c:
6b:db:17:8d:82:94:a8:e6:8b:29:71:bd:e5:b0:01:44:27:0e:
08:3d:a9:7b:91:bb:0d:44:b7:f2:7c:c2:5c:15:f9:e8:2a:1c:
aa:8d:18:83:63:a9:7b:3a:47:74:b3:eb:73:11:7a:ac:b4:95:
99:58:8c:a0:6a:6f:3f:08:cf:05:63:92:9a:d3:33:1e:e7:33:
81:f4:f6:7f:75:a2:3e:79:24:ed:fd:25:6f:fc:4a:9f:4e:cd:
45:99:91:f5:4e:78:a1:1d:32:cc:19:b2:ed:32:ee:d5:66:13:
64:32:db:d2:98:55:89:f7:6b:92:dd:fb:ec:27:c6:30:65:d7:
62:5f:0c:7c:ea:0f:14:13:c8:9e:41:7e:4f:00:75:bb:02:e8:
f4:20:3b:91:37:9b:b0:0c:c1:fb:97:fe:ea:54:4e:ab:0b:f1:
d7:e5:1a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org